Path: blob/master/scripts/deps/libpng-1.6.50-apng.patch
4802 views
diff -Naru libpng-1.6.50.org/png.h libpng-1.6.50/png.h1--- libpng-1.6.50.org/png.h 2025-07-06 11:07:05.802823471 +09002+++ libpng-1.6.50/png.h 2025-07-06 11:06:06.725585864 +09003@@ -328,6 +328,10 @@4# include "pnglibconf.h"5#endif67+#define PNG_APNG_SUPPORTED8+#define PNG_READ_APNG_SUPPORTED9+#define PNG_WRITE_APNG_SUPPORTED10+11#ifndef PNG_VERSION_INFO_ONLY12/* Machine specific configuration. */13# include "pngconf.h"14@@ -423,6 +427,17 @@15* See pngconf.h for base types that vary by machine/system16*/1718+#ifdef PNG_APNG_SUPPORTED19+/* dispose_op flags from inside fcTL */20+#define PNG_DISPOSE_OP_NONE 0x00U21+#define PNG_DISPOSE_OP_BACKGROUND 0x01U22+#define PNG_DISPOSE_OP_PREVIOUS 0x02U23+24+/* blend_op flags from inside fcTL */25+#define PNG_BLEND_OP_SOURCE 0x00U26+#define PNG_BLEND_OP_OVER 0x01U27+#endif /* PNG_APNG_SUPPORTED */28+29/* This triggers a compiler error in png.c, if png.c and png.h30* do not agree upon the version number.31*/32@@ -796,6 +811,10 @@33#ifdef PNG_PROGRESSIVE_READ_SUPPORTED34typedef PNG_CALLBACK(void, *png_progressive_info_ptr, (png_structp, png_infop));35typedef PNG_CALLBACK(void, *png_progressive_end_ptr, (png_structp, png_infop));36+#ifdef PNG_APNG_SUPPORTED37+typedef PNG_CALLBACK(void, *png_progressive_frame_ptr, (png_structp,38+ png_uint_32));39+#endif4041/* The following callback receives png_uint_32 row_number, int pass for the42* png_bytep data of the row. When transforming an interlaced image the43@@ -3357,6 +3376,75 @@44* END OF HARDWARE AND SOFTWARE OPTIONS45******************************************************************************/4647+#ifdef PNG_APNG_SUPPORTED48+PNG_EXPORT(260, png_uint_32, png_get_acTL, (png_structp png_ptr,49+ png_infop info_ptr, png_uint_32 *num_frames, png_uint_32 *num_plays));50+51+PNG_EXPORT(261, png_uint_32, png_set_acTL, (png_structp png_ptr,52+ png_infop info_ptr, png_uint_32 num_frames, png_uint_32 num_plays));53+54+PNG_EXPORT(262, png_uint_32, png_get_num_frames, (png_structp png_ptr,55+ png_infop info_ptr));56+57+PNG_EXPORT(263, png_uint_32, png_get_num_plays, (png_structp png_ptr,58+ png_infop info_ptr));59+60+PNG_EXPORT(264, png_uint_32, png_get_next_frame_fcTL,61+ (png_structp png_ptr, png_infop info_ptr, png_uint_32 *width,62+ png_uint_32 *height, png_uint_32 *x_offset, png_uint_32 *y_offset,63+ png_uint_16 *delay_num, png_uint_16 *delay_den, png_byte *dispose_op,64+ png_byte *blend_op));65+66+PNG_EXPORT(265, png_uint_32, png_set_next_frame_fcTL,67+ (png_structp png_ptr, png_infop info_ptr, png_uint_32 width,68+ png_uint_32 height, png_uint_32 x_offset, png_uint_32 y_offset,69+ png_uint_16 delay_num, png_uint_16 delay_den, png_byte dispose_op,70+ png_byte blend_op));71+72+PNG_EXPORT(266, png_uint_32, png_get_next_frame_width,73+ (png_structp png_ptr, png_infop info_ptr));74+PNG_EXPORT(267, png_uint_32, png_get_next_frame_height,75+ (png_structp png_ptr, png_infop info_ptr));76+PNG_EXPORT(268, png_uint_32, png_get_next_frame_x_offset,77+ (png_structp png_ptr, png_infop info_ptr));78+PNG_EXPORT(269, png_uint_32, png_get_next_frame_y_offset,79+ (png_structp png_ptr, png_infop info_ptr));80+PNG_EXPORT(270, png_uint_16, png_get_next_frame_delay_num,81+ (png_structp png_ptr, png_infop info_ptr));82+PNG_EXPORT(271, png_uint_16, png_get_next_frame_delay_den,83+ (png_structp png_ptr, png_infop info_ptr));84+PNG_EXPORT(272, png_byte, png_get_next_frame_dispose_op,85+ (png_structp png_ptr, png_infop info_ptr));86+PNG_EXPORT(273, png_byte, png_get_next_frame_blend_op,87+ (png_structp png_ptr, png_infop info_ptr));88+PNG_EXPORT(274, png_byte, png_get_first_frame_is_hidden,89+ (png_structp png_ptr, png_infop info_ptr));90+PNG_EXPORT(275, png_uint_32, png_set_first_frame_is_hidden,91+ (png_structp png_ptr, png_infop info_ptr, png_byte is_hidden));92+93+#ifdef PNG_READ_APNG_SUPPORTED94+PNG_EXPORT(276, void, png_read_frame_head, (png_structp png_ptr,95+ png_infop info_ptr));96+#ifdef PNG_PROGRESSIVE_READ_SUPPORTED97+PNG_EXPORT(277, void, png_set_progressive_frame_fn, (png_structp png_ptr,98+ png_progressive_frame_ptr frame_info_fn,99+ png_progressive_frame_ptr frame_end_fn));100+#endif /* PNG_PROGRESSIVE_READ_SUPPORTED */101+#endif /* PNG_READ_APNG_SUPPORTED */102+103+#ifdef PNG_WRITE_APNG_SUPPORTED104+PNG_EXPORT(278, void, png_write_frame_head, (png_structp png_ptr,105+ png_infop info_ptr,106+ png_uint_32 width, png_uint_32 height,107+ png_uint_32 x_offset, png_uint_32 y_offset,108+ png_uint_16 delay_num, png_uint_16 delay_den, png_byte dispose_op,109+ png_byte blend_op));110+111+PNG_EXPORT(279, void, png_write_frame_tail, (png_structp png_ptr,112+ png_infop info_ptr));113+#endif /* PNG_WRITE_APNG_SUPPORTED */114+#endif /* PNG_APNG_SUPPORTED */115+116/* Maintainer: Put new public prototypes here ^, in libpng.3, in project117* defs, and in scripts/symbols.def.118*/119@@ -3365,7 +3453,11 @@120* one to use is one more than this.)121*/122#ifdef PNG_EXPORT_LAST_ORDINAL123+#ifdef PNG_APNG_SUPPORTED124+ PNG_EXPORT_LAST_ORDINAL(279);125+#else126PNG_EXPORT_LAST_ORDINAL(259);127+#endif /* PNG_APNG_SUPPORTED */128#endif129130#ifdef __cplusplus131diff -Naru libpng-1.6.50.org/pngget.c libpng-1.6.50/pngget.c132--- libpng-1.6.50.org/pngget.c 2025-05-11 18:43:40.120980695 +0900133+++ libpng-1.6.50/pngget.c 2025-07-06 11:06:06.725585864 +0900134@@ -1367,4 +1367,166 @@135# endif136#endif137138+#ifdef PNG_APNG_SUPPORTED139+png_uint_32 PNGAPI140+png_get_acTL(png_structp png_ptr, png_infop info_ptr,141+ png_uint_32 *num_frames, png_uint_32 *num_plays)142+{143+ png_debug1(1, "in %s retrieval function", "acTL");144+145+ if (png_ptr != NULL && info_ptr != NULL &&146+ (info_ptr->valid & PNG_INFO_acTL) &&147+ num_frames != NULL && num_plays != NULL)148+ {149+ *num_frames = info_ptr->num_frames;150+ *num_plays = info_ptr->num_plays;151+ return (1);152+ }153+154+ return (0);155+}156+157+png_uint_32 PNGAPI158+png_get_num_frames(png_structp png_ptr, png_infop info_ptr)159+{160+ png_debug(1, "in png_get_num_frames()");161+162+ if (png_ptr != NULL && info_ptr != NULL)163+ return (info_ptr->num_frames);164+ return (0);165+}166+167+png_uint_32 PNGAPI168+png_get_num_plays(png_structp png_ptr, png_infop info_ptr)169+{170+ png_debug(1, "in png_get_num_plays()");171+172+ if (png_ptr != NULL && info_ptr != NULL)173+ return (info_ptr->num_plays);174+ return (0);175+}176+177+png_uint_32 PNGAPI178+png_get_next_frame_fcTL(png_structp png_ptr, png_infop info_ptr,179+ png_uint_32 *width, png_uint_32 *height,180+ png_uint_32 *x_offset, png_uint_32 *y_offset,181+ png_uint_16 *delay_num, png_uint_16 *delay_den,182+ png_byte *dispose_op, png_byte *blend_op)183+{184+ png_debug1(1, "in %s retrieval function", "fcTL");185+186+ if (png_ptr != NULL && info_ptr != NULL &&187+ (info_ptr->valid & PNG_INFO_fcTL) &&188+ width != NULL && height != NULL &&189+ x_offset != NULL && y_offset != NULL &&190+ delay_num != NULL && delay_den != NULL &&191+ dispose_op != NULL && blend_op != NULL)192+ {193+ *width = info_ptr->next_frame_width;194+ *height = info_ptr->next_frame_height;195+ *x_offset = info_ptr->next_frame_x_offset;196+ *y_offset = info_ptr->next_frame_y_offset;197+ *delay_num = info_ptr->next_frame_delay_num;198+ *delay_den = info_ptr->next_frame_delay_den;199+ *dispose_op = info_ptr->next_frame_dispose_op;200+ *blend_op = info_ptr->next_frame_blend_op;201+ return (1);202+ }203+204+ return (0);205+}206+207+png_uint_32 PNGAPI208+png_get_next_frame_width(png_structp png_ptr, png_infop info_ptr)209+{210+ png_debug(1, "in png_get_next_frame_width()");211+212+ if (png_ptr != NULL && info_ptr != NULL)213+ return (info_ptr->next_frame_width);214+ return (0);215+}216+217+png_uint_32 PNGAPI218+png_get_next_frame_height(png_structp png_ptr, png_infop info_ptr)219+{220+ png_debug(1, "in png_get_next_frame_height()");221+222+ if (png_ptr != NULL && info_ptr != NULL)223+ return (info_ptr->next_frame_height);224+ return (0);225+}226+227+png_uint_32 PNGAPI228+png_get_next_frame_x_offset(png_structp png_ptr, png_infop info_ptr)229+{230+ png_debug(1, "in png_get_next_frame_x_offset()");231+232+ if (png_ptr != NULL && info_ptr != NULL)233+ return (info_ptr->next_frame_x_offset);234+ return (0);235+}236+237+png_uint_32 PNGAPI238+png_get_next_frame_y_offset(png_structp png_ptr, png_infop info_ptr)239+{240+ png_debug(1, "in png_get_next_frame_y_offset()");241+242+ if (png_ptr != NULL && info_ptr != NULL)243+ return (info_ptr->next_frame_y_offset);244+ return (0);245+}246+247+png_uint_16 PNGAPI248+png_get_next_frame_delay_num(png_structp png_ptr, png_infop info_ptr)249+{250+ png_debug(1, "in png_get_next_frame_delay_num()");251+252+ if (png_ptr != NULL && info_ptr != NULL)253+ return (info_ptr->next_frame_delay_num);254+ return (0);255+}256+257+png_uint_16 PNGAPI258+png_get_next_frame_delay_den(png_structp png_ptr, png_infop info_ptr)259+{260+ png_debug(1, "in png_get_next_frame_delay_den()");261+262+ if (png_ptr != NULL && info_ptr != NULL)263+ return (info_ptr->next_frame_delay_den);264+ return (0);265+}266+267+png_byte PNGAPI268+png_get_next_frame_dispose_op(png_structp png_ptr, png_infop info_ptr)269+{270+ png_debug(1, "in png_get_next_frame_dispose_op()");271+272+ if (png_ptr != NULL && info_ptr != NULL)273+ return (info_ptr->next_frame_dispose_op);274+ return (0);275+}276+277+png_byte PNGAPI278+png_get_next_frame_blend_op(png_structp png_ptr, png_infop info_ptr)279+{280+ png_debug(1, "in png_get_next_frame_blend_op()");281+282+ if (png_ptr != NULL && info_ptr != NULL)283+ return (info_ptr->next_frame_blend_op);284+ return (0);285+}286+287+png_byte PNGAPI288+png_get_first_frame_is_hidden(png_structp png_ptr, png_infop info_ptr)289+{290+ png_debug(1, "in png_first_frame_is_hidden()");291+292+ if (png_ptr != NULL)293+ return (png_byte)(png_ptr->apng_flags & PNG_FIRST_FRAME_HIDDEN);294+295+ PNG_UNUSED(info_ptr)296+297+ return 0;298+}299+#endif /* PNG_APNG_SUPPORTED */300#endif /* READ || WRITE */301diff -Naru libpng-1.6.50.org/pnginfo.h libpng-1.6.50/pnginfo.h302--- libpng-1.6.50.org/pnginfo.h 2025-05-11 18:44:02.085040902 +0900303+++ libpng-1.6.50/pnginfo.h 2025-07-06 11:06:06.725585864 +0900304@@ -259,5 +259,18 @@305#ifdef PNG_sRGB_SUPPORTED306int rendering_intent;307#endif308+309+#ifdef PNG_APNG_SUPPORTED310+ png_uint_32 num_frames; /* including default image */311+ png_uint_32 num_plays;312+ png_uint_32 next_frame_width;313+ png_uint_32 next_frame_height;314+ png_uint_32 next_frame_x_offset;315+ png_uint_32 next_frame_y_offset;316+ png_uint_16 next_frame_delay_num;317+ png_uint_16 next_frame_delay_den;318+ png_byte next_frame_dispose_op;319+ png_byte next_frame_blend_op;320+#endif321};322#endif /* PNGINFO_H */323diff -Naru libpng-1.6.50.org/pngpread.c libpng-1.6.50/pngpread.c324--- libpng-1.6.50.org/pngpread.c 2025-07-06 11:06:43.933735454 +0900325+++ libpng-1.6.50/pngpread.c 2025-07-06 11:06:06.725585864 +0900326@@ -200,6 +200,106 @@327328chunk_name = png_ptr->chunk_name;329330+#ifdef PNG_READ_APNG_SUPPORTED331+ if (png_ptr->num_frames_read > 0 &&332+ png_ptr->num_frames_read < info_ptr->num_frames)333+ {334+ if (chunk_name == png_IDAT)335+ {336+ /* Discard trailing IDATs for the first frame */337+ if (png_ptr->mode & PNG_HAVE_fcTL || png_ptr->num_frames_read > 1)338+ png_error(png_ptr, "out of place IDAT");339+340+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)341+ {342+ png_push_save_buffer(png_ptr);343+ return;344+ }345+346+ png_ptr->mode &= ~PNG_HAVE_CHUNK_HEADER;347+ return;348+ }349+ else if (chunk_name == png_fdAT)350+ {351+ if (png_ptr->buffer_size < 4)352+ {353+ png_push_save_buffer(png_ptr);354+ return;355+ }356+357+ png_ensure_sequence_number(png_ptr, 4);358+359+ if (!(png_ptr->mode & PNG_HAVE_fcTL))360+ {361+ /* Discard trailing fdATs for frames other than the first */362+ if (png_ptr->num_frames_read < 2)363+ png_error(png_ptr, "out of place fdAT");364+365+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)366+ {367+ png_push_save_buffer(png_ptr);368+ return;369+ }370+371+ png_ptr->mode &= ~PNG_HAVE_CHUNK_HEADER;372+ return;373+ }374+375+ else376+ {377+ /* frame data follows */378+ png_ptr->idat_size = png_ptr->push_length - 4;379+ png_ptr->mode |= PNG_HAVE_IDAT;380+ png_ptr->process_mode = PNG_READ_IDAT_MODE;381+382+ return;383+ }384+ }385+386+ else if (chunk_name == png_fcTL)387+ {388+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)389+ {390+ png_push_save_buffer(png_ptr);391+ return;392+ }393+394+ png_read_reset(png_ptr);395+ png_ptr->mode &= ~PNG_HAVE_fcTL;396+397+ png_handle_fcTL(png_ptr, info_ptr, png_ptr->push_length);398+399+ if (!(png_ptr->mode & PNG_HAVE_fcTL))400+ png_error(png_ptr, "missing required fcTL chunk");401+402+ png_read_reinit(png_ptr, info_ptr);403+ png_progressive_read_reset(png_ptr);404+405+ if (png_ptr->frame_info_fn != NULL)406+ (*(png_ptr->frame_info_fn))(png_ptr, png_ptr->num_frames_read);407+408+ png_ptr->mode &= ~PNG_HAVE_CHUNK_HEADER;409+410+ return;411+ }412+413+ else414+ {415+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)416+ {417+ png_push_save_buffer(png_ptr);418+ return;419+ }420+ png_warning(png_ptr, "Skipped (ignored) a chunk "421+ "between APNG chunks");422+ png_ptr->mode &= ~PNG_HAVE_CHUNK_HEADER;423+ return;424+ }425+426+ return;427+ }428+#endif /* PNG_READ_APNG_SUPPORTED */429+430if (chunk_name == png_IDAT)431{432if ((png_ptr->mode & PNG_AFTER_IDAT) != 0)433@@ -268,6 +368,9 @@434435else if (chunk_name == png_IDAT)436{437+#ifdef PNG_READ_APNG_SUPPORTED438+ png_have_info(png_ptr, info_ptr);439+#endif440png_ptr->idat_size = png_ptr->push_length;441png_ptr->process_mode = PNG_READ_IDAT_MODE;442png_push_have_info(png_ptr, info_ptr);443@@ -278,6 +381,31 @@444return;445}446447+#ifdef PNG_READ_APNG_SUPPORTED448+ else if (chunk_name == png_acTL)449+ {450+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)451+ {452+ png_push_save_buffer(png_ptr);453+ return;454+ }455+456+ png_handle_acTL(png_ptr, info_ptr, png_ptr->push_length);457+ }458+459+ else if (chunk_name == png_fcTL)460+ {461+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)462+ {463+ png_push_save_buffer(png_ptr);464+ return;465+ }466+467+ png_handle_fcTL(png_ptr, info_ptr, png_ptr->push_length);468+ }469+470+#endif /* PNG_READ_APNG_SUPPORTED */471+472else473{474PNG_PUSH_SAVE_BUFFER_IF_FULL475@@ -409,7 +537,11 @@476png_byte chunk_tag[4];477478/* TODO: this code can be commoned up with the same code in push_read */479+#ifdef PNG_READ_APNG_SUPPORTED480+ PNG_PUSH_SAVE_BUFFER_IF_LT(12)481+#else482PNG_PUSH_SAVE_BUFFER_IF_LT(8)483+#endif484png_push_fill_buffer(png_ptr, chunk_length, 4);485png_ptr->push_length = png_get_uint_31(png_ptr, chunk_length);486png_reset_crc(png_ptr);487@@ -417,17 +549,64 @@488png_ptr->chunk_name = PNG_CHUNK_FROM_STRING(chunk_tag);489png_ptr->mode |= PNG_HAVE_CHUNK_HEADER;490491+#ifdef PNG_READ_APNG_SUPPORTED492+ if (png_ptr->chunk_name != png_fdAT && png_ptr->num_frames_read > 0)493+ {494+ if (png_ptr->flags & PNG_FLAG_ZSTREAM_ENDED)495+ {496+ png_ptr->process_mode = PNG_READ_CHUNK_MODE;497+ if (png_ptr->frame_end_fn != NULL)498+ (*(png_ptr->frame_end_fn))(png_ptr, png_ptr->num_frames_read);499+ png_ptr->num_frames_read++;500+ return;501+ }502+ else503+ {504+ if (png_ptr->chunk_name == png_IEND)505+ png_error(png_ptr, "Not enough image data");506+ if (png_ptr->push_length + 4 > png_ptr->buffer_size)507+ {508+ png_push_save_buffer(png_ptr);509+ return;510+ }511+ png_warning(png_ptr, "Skipping (ignoring) a chunk between "512+ "APNG chunks");513+ png_crc_finish(png_ptr, png_ptr->push_length);514+ png_ptr->mode &= ~PNG_HAVE_CHUNK_HEADER;515+ return;516+ }517+ }518+ else519+#endif520+#ifdef PNG_READ_APNG_SUPPORTED521+ if (png_ptr->chunk_name != png_IDAT && png_ptr->num_frames_read == 0)522+#else523if (png_ptr->chunk_name != png_IDAT)524+#endif525{526png_ptr->process_mode = PNG_READ_CHUNK_MODE;527528if ((png_ptr->flags & PNG_FLAG_ZSTREAM_ENDED) == 0)529png_error(png_ptr, "Not enough compressed data");530531+#ifdef PNG_READ_APNG_SUPPORTED532+ if (png_ptr->frame_end_fn != NULL)533+ (*(png_ptr->frame_end_fn))(png_ptr, png_ptr->num_frames_read);534+ png_ptr->num_frames_read++;535+#endif536+537return;538}539540png_ptr->idat_size = png_ptr->push_length;541+542+#ifdef PNG_READ_APNG_SUPPORTED543+ if (png_ptr->num_frames_read > 0)544+ {545+ png_ensure_sequence_number(png_ptr, 4);546+ png_ptr->idat_size -= 4;547+ }548+#endif549}550551if (png_ptr->idat_size != 0 && png_ptr->save_buffer_size != 0)552@@ -501,6 +680,15 @@553if (!(buffer_length > 0) || buffer == NULL)554png_error(png_ptr, "No IDAT data (internal error)");555556+#ifdef PNG_READ_APNG_SUPPORTED557+ /* If the app is not APNG-aware, decode only the first frame */558+ if (!(png_ptr->apng_flags & PNG_APNG_APP) && png_ptr->num_frames_read > 0)559+ {560+ png_ptr->flags |= PNG_FLAG_ZSTREAM_ENDED;561+ return;562+ }563+#endif564+565/* This routine must process all the data it has been given566* before returning, calling the row callback as required to567* handle the uncompressed results.568@@ -934,6 +1122,18 @@569png_set_read_fn(png_ptr, progressive_ptr, png_push_fill_buffer);570}571572+#ifdef PNG_READ_APNG_SUPPORTED573+void PNGAPI574+png_set_progressive_frame_fn(png_structp png_ptr,575+ png_progressive_frame_ptr frame_info_fn,576+ png_progressive_frame_ptr frame_end_fn)577+{578+ png_ptr->frame_info_fn = frame_info_fn;579+ png_ptr->frame_end_fn = frame_end_fn;580+ png_ptr->apng_flags |= PNG_APNG_APP;581+}582+#endif583+584png_voidp PNGAPI585png_get_progressive_ptr(png_const_structrp png_ptr)586{587diff -Naru libpng-1.6.50.org/pngpriv.h libpng-1.6.50/pngpriv.h588--- libpng-1.6.50.org/pngpriv.h 2025-07-06 11:06:43.933735454 +0900589+++ libpng-1.6.50/pngpriv.h 2025-07-06 11:06:06.743585936 +0900590@@ -653,6 +653,10 @@591#define PNG_HAVE_CHUNK_AFTER_IDAT 0x2000U /* Have another chunk after IDAT */592#define PNG_WROTE_eXIf 0x4000U593#define PNG_IS_READ_STRUCT 0x8000U /* Else is a write struct */594+#ifdef PNG_APNG_SUPPORTED595+#define PNG_HAVE_acTL 0x10000U596+#define PNG_HAVE_fcTL 0x20000U597+#endif598599/* Flags for the transformations the PNG library does on the image data */600#define PNG_BGR 0x0001U601@@ -917,6 +921,13 @@602#define png_tRNS PNG_U32(116, 82, 78, 83)603#define png_zTXt PNG_U32(122, 84, 88, 116)604605+#ifdef PNG_APNG_SUPPORTED606+607+/* For png_struct.apng_flags: */608+#define PNG_FIRST_FRAME_HIDDEN 0x0001U609+#define PNG_APNG_APP 0x0002U610+#endif611+612/* The following will work on (signed char*) strings, whereas the get_uint_32613* macro will fail on top-bit-set values because of the sign extension.614*/615@@ -1719,6 +1730,47 @@616PNG_EMPTY);617#endif /* PROGRESSIVE_READ */618619+#ifdef PNG_APNG_SUPPORTED620+PNG_INTERNAL_FUNCTION(void,png_ensure_fcTL_is_valid,(png_structp png_ptr,621+ png_uint_32 width, png_uint_32 height,622+ png_uint_32 x_offset, png_uint_32 y_offset,623+ png_uint_16 delay_num, png_uint_16 delay_den,624+ png_byte dispose_op, png_byte blend_op), PNG_EMPTY);625+626+#ifdef PNG_READ_APNG_SUPPORTED627+PNG_INTERNAL_FUNCTION(void,png_handle_acTL,(png_structp png_ptr, png_infop info_ptr,628+ png_uint_32 length),PNG_EMPTY);629+PNG_INTERNAL_FUNCTION(void,png_handle_fcTL,(png_structp png_ptr, png_infop info_ptr,630+ png_uint_32 length),PNG_EMPTY);631+PNG_INTERNAL_FUNCTION(void,png_handle_fdAT,(png_structp png_ptr, png_infop info_ptr,632+ png_uint_32 length),PNG_EMPTY);633+PNG_INTERNAL_FUNCTION(void,png_have_info,(png_structp png_ptr, png_infop info_ptr),PNG_EMPTY);634+PNG_INTERNAL_FUNCTION(void,png_ensure_sequence_number,(png_structp png_ptr,635+ png_uint_32 length),PNG_EMPTY);636+PNG_INTERNAL_FUNCTION(void,png_read_reset,(png_structp png_ptr),PNG_EMPTY);637+PNG_INTERNAL_FUNCTION(void,png_read_reinit,(png_structp png_ptr,638+ png_infop info_ptr),PNG_EMPTY);639+#ifdef PNG_PROGRESSIVE_READ_SUPPORTED640+PNG_INTERNAL_FUNCTION(void,png_progressive_read_reset,(png_structp png_ptr),PNG_EMPTY);641+#endif /* PNG_PROGRESSIVE_READ_SUPPORTED */642+#endif /* PNG_READ_APNG_SUPPORTED */643+644+#ifdef PNG_WRITE_APNG_SUPPORTED645+PNG_INTERNAL_FUNCTION(void,png_write_acTL,(png_structp png_ptr,646+ png_uint_32 num_frames, png_uint_32 num_plays),PNG_EMPTY);647+PNG_INTERNAL_FUNCTION(void,png_write_fcTL,(png_structp png_ptr,648+ png_uint_32 width, png_uint_32 height,649+ png_uint_32 x_offset, png_uint_32 y_offset,650+ png_uint_16 delay_num, png_uint_16 delay_den,651+ png_byte dispose_op, png_byte blend_op),PNG_EMPTY);652+PNG_INTERNAL_FUNCTION(void,png_write_fdAT,(png_structp png_ptr,653+ png_const_bytep data, png_size_t length),PNG_EMPTY);654+PNG_INTERNAL_FUNCTION(void,png_write_reset,(png_structp png_ptr),PNG_EMPTY);655+PNG_INTERNAL_FUNCTION(void,png_write_reinit,(png_structp png_ptr,656+ png_infop info_ptr, png_uint_32 width, png_uint_32 height),PNG_EMPTY);657+#endif /* PNG_WRITE_APNG_SUPPORTED */658+#endif /* PNG_APNG_SUPPORTED */659+660#ifdef PNG_iCCP_SUPPORTED661/* Routines for checking parts of an ICC profile. */662#ifdef PNG_READ_iCCP_SUPPORTED663diff -Naru libpng-1.6.50.org/pngread.c libpng-1.6.50/pngread.c664--- libpng-1.6.50.org/pngread.c 2025-07-06 11:06:43.934735458 +0900665+++ libpng-1.6.50/pngread.c 2025-07-06 11:06:06.726585868 +0900666@@ -155,16 +155,96 @@667668else if (chunk_name == png_IDAT)669{670+#ifdef PNG_READ_APNG_SUPPORTED671+ png_have_info(png_ptr, info_ptr);672+#endif673png_ptr->idat_size = length;674break;675}676677+#ifdef PNG_READ_APNG_SUPPORTED678+ else if (chunk_name == png_acTL)679+ png_handle_acTL(png_ptr, info_ptr, length);680+681+ else if (chunk_name == png_fcTL)682+ png_handle_fcTL(png_ptr, info_ptr, length);683+684+ else if (chunk_name == png_fdAT)685+ png_handle_fdAT(png_ptr, info_ptr, length);686+#endif687+688else689png_handle_chunk(png_ptr, info_ptr, length);690}691}692#endif /* SEQUENTIAL_READ */693694+#ifdef PNG_READ_APNG_SUPPORTED695+void PNGAPI696+png_read_frame_head(png_structp png_ptr, png_infop info_ptr)697+{698+ png_byte have_chunk_after_DAT; /* after IDAT or after fdAT */699+700+ png_debug(0, "Reading frame head");701+702+ if (!(png_ptr->mode & PNG_HAVE_acTL))703+ png_error(png_ptr, "attempt to png_read_frame_head() but "704+ "no acTL present");705+706+ /* do nothing for the main IDAT */707+ if (png_ptr->num_frames_read == 0)708+ return;709+710+ png_read_reset(png_ptr);711+ png_ptr->flags &= ~PNG_FLAG_ROW_INIT;712+ png_ptr->mode &= ~PNG_HAVE_fcTL;713+714+ have_chunk_after_DAT = 0;715+ for (;;)716+ {717+ png_uint_32 length = png_read_chunk_header(png_ptr);718+719+ if (png_ptr->chunk_name == png_IDAT)720+ {721+ /* discard trailing IDATs for the first frame */722+ if (have_chunk_after_DAT || png_ptr->num_frames_read > 1)723+ png_error(png_ptr, "png_read_frame_head(): out of place IDAT");724+ png_crc_finish(png_ptr, length);725+ }726+727+ else if (png_ptr->chunk_name == png_fcTL)728+ {729+ png_handle_fcTL(png_ptr, info_ptr, length);730+ have_chunk_after_DAT = 1;731+ }732+733+ else if (png_ptr->chunk_name == png_fdAT)734+ {735+ png_ensure_sequence_number(png_ptr, length);736+737+ /* discard trailing fdATs for frames other than the first */738+ if (!have_chunk_after_DAT && png_ptr->num_frames_read > 1)739+ png_crc_finish(png_ptr, length - 4);740+ else if(png_ptr->mode & PNG_HAVE_fcTL)741+ {742+ png_ptr->idat_size = length - 4;743+ png_ptr->mode |= PNG_HAVE_IDAT;744+745+ break;746+ }747+ else748+ png_error(png_ptr, "png_read_frame_head(): out of place fdAT");749+ }750+ else751+ {752+ png_warning(png_ptr, "Skipped (ignored) a chunk "753+ "between APNG chunks");754+ png_crc_finish(png_ptr, length);755+ }756+ }757+}758+#endif /* PNG_READ_APNG_SUPPORTED */759+760/* Optional call to update the users info_ptr structure */761void PNGAPI762png_read_update_info(png_structrp png_ptr, png_inforp info_ptr)763diff -Naru libpng-1.6.50.org/pngrutil.c libpng-1.6.50/pngrutil.c764--- libpng-1.6.50.org/pngrutil.c 2025-07-06 11:06:43.934735458 +0900765+++ libpng-1.6.50/pngrutil.c 2025-07-06 11:06:06.727585872 +0900766@@ -922,6 +922,11 @@767filter_type = buf[11];768interlace_type = buf[12];769770+#ifdef PNG_READ_APNG_SUPPORTED771+ png_ptr->first_frame_width = width;772+ png_ptr->first_frame_height = height;773+#endif774+775/* Set internal variables */776png_ptr->width = width;777png_ptr->height = height;778@@ -2718,6 +2723,179 @@779# define png_handle_iTXt NULL780#endif781782+#ifdef PNG_READ_APNG_SUPPORTED783+void /* PRIVATE */784+png_handle_acTL(png_structp png_ptr, png_infop info_ptr, png_uint_32 length)785+{786+ png_byte data[8];787+ png_uint_32 num_frames;788+ png_uint_32 num_plays;789+ png_uint_32 didSet;790+791+ png_debug(1, "in png_handle_acTL");792+793+ if (!(png_ptr->mode & PNG_HAVE_IHDR))794+ {795+ png_error(png_ptr, "Missing IHDR before acTL");796+ }797+ else if (png_ptr->mode & PNG_HAVE_IDAT)798+ {799+ png_warning(png_ptr, "Invalid acTL after IDAT skipped");800+ png_crc_finish(png_ptr, length);801+ return;802+ }803+ else if (png_ptr->mode & PNG_HAVE_acTL)804+ {805+ png_warning(png_ptr, "Duplicate acTL skipped");806+ png_crc_finish(png_ptr, length);807+ return;808+ }809+ else if (length != 8)810+ {811+ png_warning(png_ptr, "acTL with invalid length skipped");812+ png_crc_finish(png_ptr, length);813+ return;814+ }815+816+ png_crc_read(png_ptr, data, 8);817+ png_crc_finish(png_ptr, 0);818+819+ num_frames = png_get_uint_31(png_ptr, data);820+ num_plays = png_get_uint_31(png_ptr, data + 4);821+822+ /* the set function will do error checking on num_frames */823+ didSet = png_set_acTL(png_ptr, info_ptr, num_frames, num_plays);824+ if(didSet)825+ png_ptr->mode |= PNG_HAVE_acTL;826+}827+828+void /* PRIVATE */829+png_handle_fcTL(png_structp png_ptr, png_infop info_ptr, png_uint_32 length)830+{831+ png_byte data[22];832+ png_uint_32 width;833+ png_uint_32 height;834+ png_uint_32 x_offset;835+ png_uint_32 y_offset;836+ png_uint_16 delay_num;837+ png_uint_16 delay_den;838+ png_byte dispose_op;839+ png_byte blend_op;840+841+ png_debug(1, "in png_handle_fcTL");842+843+ png_ensure_sequence_number(png_ptr, length);844+845+ if (!(png_ptr->mode & PNG_HAVE_IHDR))846+ {847+ png_error(png_ptr, "Missing IHDR before fcTL");848+ }849+ else if (png_ptr->mode & PNG_HAVE_IDAT)850+ {851+ /* for any frames other then the first this message may be misleading,852+ * but correct. PNG_HAVE_IDAT is unset before the frame head is read853+ * i can't think of a better message */854+ png_warning(png_ptr, "Invalid fcTL after IDAT skipped");855+ png_crc_finish(png_ptr, length-4);856+ return;857+ }858+ else if (png_ptr->mode & PNG_HAVE_fcTL)859+ {860+ png_warning(png_ptr, "Duplicate fcTL within one frame skipped");861+ png_crc_finish(png_ptr, length-4);862+ return;863+ }864+ else if (length != 26)865+ {866+ png_warning(png_ptr, "fcTL with invalid length skipped");867+ png_crc_finish(png_ptr, length-4);868+ return;869+ }870+871+ png_crc_read(png_ptr, data, 22);872+ png_crc_finish(png_ptr, 0);873+874+ width = png_get_uint_31(png_ptr, data);875+ height = png_get_uint_31(png_ptr, data + 4);876+ x_offset = png_get_uint_31(png_ptr, data + 8);877+ y_offset = png_get_uint_31(png_ptr, data + 12);878+ delay_num = png_get_uint_16(data + 16);879+ delay_den = png_get_uint_16(data + 18);880+ dispose_op = data[20];881+ blend_op = data[21];882+883+ if (png_ptr->num_frames_read == 0 && (x_offset != 0 || y_offset != 0))884+ {885+ png_warning(png_ptr, "fcTL for the first frame must have zero offset");886+ return;887+ }888+889+ if (info_ptr != NULL)890+ {891+ if (png_ptr->num_frames_read == 0 &&892+ (width != info_ptr->width || height != info_ptr->height))893+ {894+ png_warning(png_ptr, "size in first frame's fcTL must match "895+ "the size in IHDR");896+ return;897+ }898+899+ /* The set function will do more error checking */900+ png_set_next_frame_fcTL(png_ptr, info_ptr, width, height,901+ x_offset, y_offset, delay_num, delay_den,902+ dispose_op, blend_op);903+904+ png_read_reinit(png_ptr, info_ptr);905+906+ png_ptr->mode |= PNG_HAVE_fcTL;907+ }908+}909+910+void /* PRIVATE */911+png_have_info(png_structp png_ptr, png_infop info_ptr)912+{913+ if((info_ptr->valid & PNG_INFO_acTL) && !(info_ptr->valid & PNG_INFO_fcTL))914+ {915+ png_ptr->apng_flags |= PNG_FIRST_FRAME_HIDDEN;916+ info_ptr->num_frames++;917+ }918+}919+920+void /* PRIVATE */921+png_handle_fdAT(png_structp png_ptr, png_infop info_ptr, png_uint_32 length)922+{923+ png_ensure_sequence_number(png_ptr, length);924+925+ /* This function is only called from png_read_end(), png_read_info(),926+ * and png_push_read_chunk() which means that:927+ * - the user doesn't want to read this frame928+ * - or this is an out-of-place fdAT929+ * in either case it is safe to ignore the chunk with a warning */930+ png_warning(png_ptr, "ignoring fdAT chunk");931+ png_crc_finish(png_ptr, length - 4);932+ PNG_UNUSED(info_ptr)933+}934+935+void /* PRIVATE */936+png_ensure_sequence_number(png_structp png_ptr, png_uint_32 length)937+{938+ png_byte data[4];939+ png_uint_32 sequence_number;940+941+ if (length < 4)942+ png_error(png_ptr, "invalid fcTL or fdAT chunk found");943+944+ png_crc_read(png_ptr, data, 4);945+ sequence_number = png_get_uint_31(png_ptr, data);946+947+ if (sequence_number != png_ptr->next_seq_num)948+ png_error(png_ptr, "fcTL or fdAT chunk with out-of-order sequence "949+ "number found");950+951+ png_ptr->next_seq_num++;952+}953+#endif /* PNG_READ_APNG_SUPPORTED */954+955#ifdef PNG_READ_UNKNOWN_CHUNKS_SUPPORTED956/* Utility function for png_handle_unknown; set up png_ptr::unknown_chunk */957static int958@@ -4200,7 +4378,38 @@959{960uInt avail_in;961png_bytep buffer;962+#ifdef PNG_READ_APNG_SUPPORTED963+ png_uint_32 bytes_to_skip = 0;964965+ while (png_ptr->idat_size == 0 || bytes_to_skip != 0)966+ {967+ png_crc_finish(png_ptr, bytes_to_skip);968+ bytes_to_skip = 0;969+970+ png_ptr->idat_size = png_read_chunk_header(png_ptr);971+ if (png_ptr->num_frames_read == 0)972+ {973+ if (png_ptr->chunk_name != png_IDAT)974+ png_error(png_ptr, "Not enough image data");975+ }976+ else977+ {978+ if (png_ptr->chunk_name == png_IEND)979+ png_error(png_ptr, "Not enough image data");980+ if (png_ptr->chunk_name != png_fdAT)981+ {982+ png_warning(png_ptr, "Skipped (ignored) a chunk "983+ "between APNG chunks");984+ bytes_to_skip = png_ptr->idat_size;985+ continue;986+ }987+988+ png_ensure_sequence_number(png_ptr, png_ptr->idat_size);989+990+ png_ptr->idat_size -= 4;991+ }992+ }993+#else994while (png_ptr->idat_size == 0)995{996png_crc_finish(png_ptr, 0);997@@ -4212,7 +4421,7 @@998if (png_ptr->chunk_name != png_IDAT)999png_error(png_ptr, "Not enough image data");1000}1001-1002+#endif /* PNG_READ_APNG_SUPPORTED */1003avail_in = png_ptr->IDAT_read_size;10041005if (avail_in > png_chunk_max(png_ptr))1006@@ -4283,6 +4492,9 @@10071008png_ptr->mode |= PNG_AFTER_IDAT;1009png_ptr->flags |= PNG_FLAG_ZSTREAM_ENDED;1010+#ifdef PNG_READ_APNG_SUPPORTED1011+ png_ptr->num_frames_read++;1012+#endif10131014if (png_ptr->zstream.avail_in > 0 || png_ptr->idat_size > 0)1015png_chunk_benign_error(png_ptr, "Extra compressed data");1016@@ -4692,4 +4904,80 @@10171018png_ptr->flags |= PNG_FLAG_ROW_INIT;1019}1020+1021+#ifdef PNG_READ_APNG_SUPPORTED1022+/* This function is to be called after the main IDAT set has been read and1023+ * before a new IDAT is read. It resets some parts of png_ptr1024+ * to make them usable by the read functions again */1025+void /* PRIVATE */1026+png_read_reset(png_structp png_ptr)1027+{1028+ png_ptr->mode &= ~PNG_HAVE_IDAT;1029+ png_ptr->mode &= ~PNG_AFTER_IDAT;1030+ png_ptr->row_number = 0;1031+ png_ptr->pass = 0;1032+}1033+1034+void /* PRIVATE */1035+png_read_reinit(png_structp png_ptr, png_infop info_ptr)1036+{1037+ png_ptr->width = info_ptr->next_frame_width;1038+ png_ptr->height = info_ptr->next_frame_height;1039+ png_ptr->rowbytes = PNG_ROWBYTES(png_ptr->pixel_depth,png_ptr->width);1040+ png_ptr->info_rowbytes = PNG_ROWBYTES(info_ptr->pixel_depth,1041+ png_ptr->width);1042+ if (png_ptr->prev_row)1043+ memset(png_ptr->prev_row, 0, png_ptr->rowbytes + 1);1044+}1045+1046+#ifdef PNG_PROGRESSIVE_READ_SUPPORTED1047+/* same as png_read_reset() but for the progressive reader */1048+void /* PRIVATE */1049+png_progressive_read_reset(png_structp png_ptr)1050+{1051+#ifdef PNG_READ_INTERLACING_SUPPORTED1052+ /* Arrays to facilitate easy interlacing - use pass (0 - 6) as index */1053+1054+ /* Start of interlace block */1055+ const int png_pass_start[] = {0, 4, 0, 2, 0, 1, 0};1056+1057+ /* Offset to next interlace block */1058+ const int png_pass_inc[] = {8, 8, 4, 4, 2, 2, 1};1059+1060+ /* Start of interlace block in the y direction */1061+ const int png_pass_ystart[] = {0, 0, 4, 0, 2, 0, 1};1062+1063+ /* Offset to next interlace block in the y direction */1064+ const int png_pass_yinc[] = {8, 8, 8, 4, 4, 2, 2};1065+1066+ if (png_ptr->interlaced)1067+ {1068+ if (!(png_ptr->transformations & PNG_INTERLACE))1069+ png_ptr->num_rows = (png_ptr->height + png_pass_yinc[0] - 1 -1070+ png_pass_ystart[0]) / png_pass_yinc[0];1071+ else1072+ png_ptr->num_rows = png_ptr->height;1073+1074+ png_ptr->iwidth = (png_ptr->width +1075+ png_pass_inc[png_ptr->pass] - 1 -1076+ png_pass_start[png_ptr->pass]) /1077+ png_pass_inc[png_ptr->pass];1078+ }1079+ else1080+#endif /* PNG_READ_INTERLACING_SUPPORTED */1081+ {1082+ png_ptr->num_rows = png_ptr->height;1083+ png_ptr->iwidth = png_ptr->width;1084+ }1085+ png_ptr->flags &= ~PNG_FLAG_ZSTREAM_ENDED;1086+ if (inflateReset(&(png_ptr->zstream)) != Z_OK)1087+ png_error(png_ptr, "inflateReset failed");1088+ png_ptr->zstream.avail_in = 0;1089+ png_ptr->zstream.next_in = 0;1090+ png_ptr->zstream.next_out = png_ptr->row_buf;1091+ png_ptr->zstream.avail_out = (uInt)PNG_ROWBYTES(png_ptr->pixel_depth,1092+ png_ptr->iwidth) + 1;1093+}1094+#endif /* PNG_PROGRESSIVE_READ_SUPPORTED */1095+#endif /* PNG_READ_APNG_SUPPORTED */1096#endif /* READ */1097diff -Naru libpng-1.6.50.org/pngset.c libpng-1.6.50/pngset.c1098--- libpng-1.6.50.org/pngset.c 2025-05-11 18:44:02.087040907 +09001099+++ libpng-1.6.50/pngset.c 2025-07-06 11:06:06.727585872 +09001100@@ -460,6 +460,11 @@1101info_ptr->pixel_depth = (png_byte)(info_ptr->channels * info_ptr->bit_depth);11021103info_ptr->rowbytes = PNG_ROWBYTES(info_ptr->pixel_depth, width);1104+1105+#ifdef PNG_APNG_SUPPORTED1106+ /* for non-animated png. this may be overwritten from an acTL chunk later */1107+ info_ptr->num_frames = 1;1108+#endif1109}11101111#ifdef PNG_oFFs_SUPPORTED1112@@ -1315,6 +1320,147 @@1113}1114#endif /* sPLT */11151116+#ifdef PNG_APNG_SUPPORTED1117+png_uint_32 PNGAPI1118+png_set_acTL(png_structp png_ptr, png_infop info_ptr,1119+ png_uint_32 num_frames, png_uint_32 num_plays)1120+{1121+ png_debug1(1, "in %s storage function", "acTL");1122+1123+ if (png_ptr == NULL || info_ptr == NULL)1124+ {1125+ png_warning(png_ptr,1126+ "Call to png_set_acTL() with NULL png_ptr "1127+ "or info_ptr ignored");1128+ return (0);1129+ }1130+ if (num_frames == 0)1131+ {1132+ png_warning(png_ptr,1133+ "Ignoring attempt to set acTL with num_frames zero");1134+ return (0);1135+ }1136+ if (num_frames > PNG_UINT_31_MAX)1137+ {1138+ png_warning(png_ptr,1139+ "Ignoring attempt to set acTL with num_frames > 2^31-1");1140+ return (0);1141+ }1142+ if (num_plays > PNG_UINT_31_MAX)1143+ {1144+ png_warning(png_ptr,1145+ "Ignoring attempt to set acTL with num_plays "1146+ "> 2^31-1");1147+ return (0);1148+ }1149+1150+ info_ptr->num_frames = num_frames;1151+ info_ptr->num_plays = num_plays;1152+1153+ info_ptr->valid |= PNG_INFO_acTL;1154+1155+ return (1);1156+}1157+1158+/* delay_num and delay_den can hold any 16-bit values including zero */1159+png_uint_32 PNGAPI1160+png_set_next_frame_fcTL(png_structp png_ptr, png_infop info_ptr,1161+ png_uint_32 width, png_uint_32 height,1162+ png_uint_32 x_offset, png_uint_32 y_offset,1163+ png_uint_16 delay_num, png_uint_16 delay_den,1164+ png_byte dispose_op, png_byte blend_op)1165+{1166+ png_debug1(1, "in %s storage function", "fcTL");1167+1168+ if (png_ptr == NULL || info_ptr == NULL)1169+ {1170+ png_warning(png_ptr,1171+ "Call to png_set_fcTL() with NULL png_ptr or info_ptr "1172+ "ignored");1173+ return (0);1174+ }1175+1176+ png_ensure_fcTL_is_valid(png_ptr, width, height, x_offset, y_offset,1177+ delay_num, delay_den, dispose_op, blend_op);1178+1179+ if (blend_op == PNG_BLEND_OP_OVER)1180+ {1181+ if (!(png_ptr->color_type & PNG_COLOR_MASK_ALPHA) &&1182+ !(png_get_valid(png_ptr, info_ptr, PNG_INFO_tRNS)))1183+ {1184+ png_warning(png_ptr, "PNG_BLEND_OP_OVER is meaningless "1185+ "and wasteful for opaque images, ignored");1186+ blend_op = PNG_BLEND_OP_SOURCE;1187+ }1188+ }1189+1190+ info_ptr->next_frame_width = width;1191+ info_ptr->next_frame_height = height;1192+ info_ptr->next_frame_x_offset = x_offset;1193+ info_ptr->next_frame_y_offset = y_offset;1194+ info_ptr->next_frame_delay_num = delay_num;1195+ info_ptr->next_frame_delay_den = delay_den;1196+ info_ptr->next_frame_dispose_op = dispose_op;1197+ info_ptr->next_frame_blend_op = blend_op;1198+1199+ info_ptr->valid |= PNG_INFO_fcTL;1200+1201+ return (1);1202+}1203+1204+void /* PRIVATE */1205+png_ensure_fcTL_is_valid(png_structp png_ptr,1206+ png_uint_32 width, png_uint_32 height,1207+ png_uint_32 x_offset, png_uint_32 y_offset,1208+ png_uint_16 delay_num, png_uint_16 delay_den,1209+ png_byte dispose_op, png_byte blend_op)1210+{1211+ if (width == 0 || width > PNG_UINT_31_MAX)1212+ png_error(png_ptr, "invalid width in fcTL (> 2^31-1)");1213+ if (height == 0 || height > PNG_UINT_31_MAX)1214+ png_error(png_ptr, "invalid height in fcTL (> 2^31-1)");1215+ if (x_offset > PNG_UINT_31_MAX)1216+ png_error(png_ptr, "invalid x_offset in fcTL (> 2^31-1)");1217+ if (y_offset > PNG_UINT_31_MAX)1218+ png_error(png_ptr, "invalid y_offset in fcTL (> 2^31-1)");1219+ if (width + x_offset > png_ptr->first_frame_width ||1220+ height + y_offset > png_ptr->first_frame_height)1221+ png_error(png_ptr, "dimensions of a frame are greater than"1222+ "the ones in IHDR");1223+1224+ if (dispose_op != PNG_DISPOSE_OP_NONE &&1225+ dispose_op != PNG_DISPOSE_OP_BACKGROUND &&1226+ dispose_op != PNG_DISPOSE_OP_PREVIOUS)1227+ png_error(png_ptr, "invalid dispose_op in fcTL");1228+1229+ if (blend_op != PNG_BLEND_OP_SOURCE &&1230+ blend_op != PNG_BLEND_OP_OVER)1231+ png_error(png_ptr, "invalid blend_op in fcTL");1232+1233+ PNG_UNUSED(delay_num)1234+ PNG_UNUSED(delay_den)1235+}1236+1237+png_uint_32 PNGAPI1238+png_set_first_frame_is_hidden(png_structp png_ptr, png_infop info_ptr,1239+ png_byte is_hidden)1240+{1241+ png_debug(1, "in png_first_frame_is_hidden()");1242+1243+ if (png_ptr == NULL)1244+ return 0;1245+1246+ if (is_hidden)1247+ png_ptr->apng_flags |= PNG_FIRST_FRAME_HIDDEN;1248+ else1249+ png_ptr->apng_flags &= ~PNG_FIRST_FRAME_HIDDEN;1250+1251+ PNG_UNUSED(info_ptr)1252+1253+ return 1;1254+}1255+#endif /* PNG_APNG_SUPPORTED */1256+1257#ifdef PNG_STORE_UNKNOWN_CHUNKS_SUPPORTED1258static png_byte1259check_location(png_const_structrp png_ptr, int location)1260diff -Naru libpng-1.6.50.org/pngstruct.h libpng-1.6.50/pngstruct.h1261--- libpng-1.6.50.org/pngstruct.h 2025-06-14 15:22:41.053935129 +09001262+++ libpng-1.6.50/pngstruct.h 2025-07-06 11:06:06.727585872 +09001263@@ -391,6 +391,27 @@1264png_byte filter_type;1265#endif12661267+#ifdef PNG_APNG_SUPPORTED1268+ png_uint_32 apng_flags;1269+ png_uint_32 next_seq_num; /* next fcTL/fdAT chunk sequence number */1270+ png_uint_32 first_frame_width;1271+ png_uint_32 first_frame_height;1272+1273+#ifdef PNG_READ_APNG_SUPPORTED1274+ png_uint_32 num_frames_read; /* incremented after all image data of */1275+ /* a frame is read */1276+#ifdef PNG_PROGRESSIVE_READ_SUPPORTED1277+ png_progressive_frame_ptr frame_info_fn; /* frame info read callback */1278+ png_progressive_frame_ptr frame_end_fn; /* frame data read callback */1279+#endif1280+#endif1281+1282+#ifdef PNG_WRITE_APNG_SUPPORTED1283+ png_uint_32 num_frames_to_write;1284+ png_uint_32 num_frames_written;1285+#endif1286+#endif /* PNG_APNG_SUPPORTED */1287+1288/* New members added in libpng-1.2.0 */12891290/* New members added in libpng-1.0.2 but first enabled by default in 1.2.0 */1291diff -Naru libpng-1.6.50.org/pngtest.c libpng-1.6.50/pngtest.c1292--- libpng-1.6.50.org/pngtest.c 2025-07-06 11:07:05.802823471 +09001293+++ libpng-1.6.50/pngtest.c 2025-07-06 11:06:06.727585872 +09001294@@ -877,6 +877,10 @@1295int bit_depth, color_type;1296user_chunk_info my_user_chunk_data;1297int pass, num_passes;1298+#ifdef PNG_APNG_SUPPORTED1299+ png_uint_32 num_frames;1300+ png_uint_32 num_plays;1301+#endif13021303row_buf = NULL;1304error_parameters.file_name = inname;1305@@ -1437,6 +1441,22 @@1306}1307}1308#endif1309+1310+#ifdef PNG_APNG_SUPPORTED1311+ if (png_get_valid(read_ptr, read_info_ptr, PNG_INFO_acTL))1312+ {1313+ if (png_get_acTL(read_ptr, read_info_ptr, &num_frames, &num_plays))1314+ {1315+ png_byte is_hidden;1316+ pngtest_debug2("Handling acTL chunks (frames %ld, plays %ld)",1317+ num_frames, num_plays);1318+ png_set_acTL(write_ptr, write_info_ptr, num_frames, num_plays);1319+ is_hidden = png_get_first_frame_is_hidden(read_ptr, read_info_ptr);1320+ png_set_first_frame_is_hidden(write_ptr, write_info_ptr, is_hidden);1321+ }1322+ }1323+#endif1324+1325#ifdef PNG_WRITE_UNKNOWN_CHUNKS_SUPPORTED1326{1327png_unknown_chunkp unknowns;1328@@ -1496,6 +1516,110 @@1329t_misc += (t_stop - t_start);1330t_start = t_stop;1331#endif1332+#ifdef PNG_APNG_SUPPORTED1333+ if (png_get_valid(read_ptr, read_info_ptr, PNG_INFO_acTL))1334+ {1335+ png_uint_32 frame;1336+ for (frame = 0; frame < num_frames; frame++)1337+ {1338+ png_uint_32 frame_width;1339+ png_uint_32 frame_height;1340+ png_uint_32 x_offset;1341+ png_uint_32 y_offset;1342+ png_uint_16 delay_num;1343+ png_uint_16 delay_den;1344+ png_byte dispose_op;1345+ png_byte blend_op;1346+ png_read_frame_head(read_ptr, read_info_ptr);1347+ if (png_get_valid(read_ptr, read_info_ptr, PNG_INFO_fcTL))1348+ {1349+ png_get_next_frame_fcTL(read_ptr, read_info_ptr,1350+ &frame_width, &frame_height,1351+ &x_offset, &y_offset,1352+ &delay_num, &delay_den,1353+ &dispose_op, &blend_op);1354+ }1355+ else1356+ {1357+ frame_width = width;1358+ frame_height = height;1359+ x_offset = 0;1360+ y_offset = 0;1361+ delay_num = 1;1362+ delay_den = 1;1363+ dispose_op = PNG_DISPOSE_OP_NONE;1364+ blend_op = PNG_BLEND_OP_SOURCE;1365+ }1366+#ifdef PNG_WRITE_APNG_SUPPORTED1367+ png_write_frame_head(write_ptr, write_info_ptr, (png_bytepp)&row_buf,1368+ frame_width, frame_height,1369+ x_offset, y_offset,1370+ delay_num, delay_den,1371+ dispose_op, blend_op);1372+#endif1373+ for (pass = 0; pass < num_passes; pass++)1374+ {1375+# ifdef calc_pass_height1376+ png_uint_32 pass_height;1377+1378+ if (num_passes == 7) /* interlaced */1379+ {1380+ if (PNG_PASS_COLS(frame_width, pass) > 0)1381+ pass_height = PNG_PASS_ROWS(frame_height, pass);1382+1383+ else1384+ pass_height = 0;1385+ }1386+1387+ else /* not interlaced */1388+ pass_height = frame_height;1389+# else1390+# define pass_height frame_height1391+# endif1392+1393+ pngtest_debug1("Writing row data for pass %d", pass);1394+ for (y = 0; y < pass_height; y++)1395+ {1396+#ifndef SINGLE_ROWBUF_ALLOC1397+ pngtest_debug2("Allocating row buffer (pass %d, y = %u)...", pass, y);1398+1399+ row_buf = (png_bytep)png_malloc(read_ptr,1400+ png_get_rowbytes(read_ptr, read_info_ptr));1401+1402+ pngtest_debug2("\t0x%08lx (%lu bytes)", (unsigned long)row_buf,1403+ (unsigned long)png_get_rowbytes(read_ptr, read_info_ptr));1404+1405+#endif /* !SINGLE_ROWBUF_ALLOC */1406+ png_read_rows(read_ptr, (png_bytepp)&row_buf, NULL, 1);1407+1408+#ifdef PNG_WRITE_SUPPORTED1409+#ifdef PNGTEST_TIMING1410+ t_stop = (float)clock();1411+ t_decode += (t_stop - t_start);1412+ t_start = t_stop;1413+#endif1414+ png_write_rows(write_ptr, (png_bytepp)&row_buf, 1);1415+#ifdef PNGTEST_TIMING1416+ t_stop = (float)clock();1417+ t_encode += (t_stop - t_start);1418+ t_start = t_stop;1419+#endif1420+#endif /* PNG_WRITE_SUPPORTED */1421+1422+#ifndef SINGLE_ROWBUF_ALLOC1423+ pngtest_debug2("Freeing row buffer (pass %d, y = %u)", pass, y);1424+ png_free(read_ptr, row_buf);1425+ row_buf = NULL;1426+#endif /* !SINGLE_ROWBUF_ALLOC */1427+ }1428+ }1429+#ifdef PNG_WRITE_APNG_SUPPORTED1430+ png_write_frame_tail(write_ptr, write_info_ptr);1431+#endif1432+ }1433+ }1434+ else1435+#endif1436for (pass = 0; pass < num_passes; pass++)1437{1438# ifdef calc_pass_height1439diff -Naru libpng-1.6.50.org/pngwrite.c libpng-1.6.50/pngwrite.c1440--- libpng-1.6.50.org/pngwrite.c 2025-05-11 18:44:02.088040910 +09001441+++ libpng-1.6.50/pngwrite.c 2025-07-06 11:06:06.728585876 +09001442@@ -127,6 +127,11 @@1443* the application continues writing the PNG. So check the 'invalid'1444* flag here too.1445*/1446+#ifdef PNG_WRITE_APNG_SUPPORTED1447+ if ((info_ptr->valid & PNG_INFO_acTL) != 0)1448+ png_write_acTL(png_ptr, info_ptr->num_frames, info_ptr->num_plays);1449+#endif1450+1451#ifdef PNG_WRITE_UNKNOWN_CHUNKS_SUPPORTED1452/* Write unknown chunks first; PNG v3 establishes a precedence order1453* for colourspace chunks. It is certain therefore that new1454@@ -405,6 +410,11 @@1455png_benign_error(png_ptr, "Wrote palette index exceeding num_palette");1456#endif14571458+#ifdef PNG_WRITE_APNG_SUPPORTED1459+ if (png_ptr->num_frames_written != png_ptr->num_frames_to_write)1460+ png_error(png_ptr, "Not enough frames written");1461+#endif1462+1463/* See if user wants us to write information chunks */1464if (info_ptr != NULL)1465{1466@@ -1515,6 +1525,41 @@1467}1468#endif14691470+#ifdef PNG_WRITE_APNG_SUPPORTED1471+void PNGAPI1472+png_write_frame_head(png_structp png_ptr, png_infop info_ptr,1473+ png_uint_32 width, png_uint_32 height,1474+ png_uint_32 x_offset, png_uint_32 y_offset,1475+ png_uint_16 delay_num, png_uint_16 delay_den, png_byte dispose_op,1476+ png_byte blend_op)1477+{1478+ png_debug(1, "in png_write_frame_head");1479+1480+ /* there is a chance this has been set after png_write_info was called,1481+ * so it would be set but not written. is there a way to be sure? */1482+ if (!(info_ptr->valid & PNG_INFO_acTL))1483+ png_error(png_ptr, "png_write_frame_head(): acTL not set");1484+1485+ png_write_reset(png_ptr);1486+1487+ png_write_reinit(png_ptr, info_ptr, width, height);1488+1489+ if ( !(png_ptr->num_frames_written == 0 &&1490+ (png_ptr->apng_flags & PNG_FIRST_FRAME_HIDDEN) ) )1491+ png_write_fcTL(png_ptr, width, height, x_offset, y_offset,1492+ delay_num, delay_den, dispose_op, blend_op);1493+}1494+1495+void PNGAPI1496+png_write_frame_tail(png_structp png_ptr, png_infop info_ptr)1497+{1498+ png_debug(1, "in png_write_frame_tail");1499+1500+ png_ptr->num_frames_written++;1501+1502+ PNG_UNUSED(info_ptr)1503+}1504+#endif /* PNG_WRITE_APNG_SUPPORTED */15051506#ifdef PNG_SIMPLIFIED_WRITE_SUPPORTED1507/* Initialize the write structure - general purpose utility. */1508diff -Naru libpng-1.6.50.org/pngwutil.c libpng-1.6.50/pngwutil.c1509--- libpng-1.6.50.org/pngwutil.c 2025-05-11 18:43:40.128980717 +09001510+++ libpng-1.6.50/pngwutil.c 2025-07-06 11:06:06.728585876 +09001511@@ -838,6 +838,11 @@1512/* Write the chunk */1513png_write_complete_chunk(png_ptr, png_IHDR, buf, 13);15141515+#ifdef PNG_WRITE_APNG_SUPPORTED1516+ png_ptr->first_frame_width = width;1517+ png_ptr->first_frame_height = height;1518+#endif1519+1520if ((png_ptr->do_filter) == PNG_NO_FILTERS)1521{1522if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE ||1523@@ -1019,8 +1024,17 @@1524optimize_cmf(data, png_image_size(png_ptr));1525#endif15261527- if (size > 0)1528- png_write_complete_chunk(png_ptr, png_IDAT, data, size);1529+ if (size > 0)1530+#ifdef PNG_WRITE_APNG_SUPPORTED1531+ {1532+ if (png_ptr->num_frames_written == 0)1533+#endif1534+ png_write_complete_chunk(png_ptr, png_IDAT, data, size);1535+#ifdef PNG_WRITE_APNG_SUPPORTED1536+ else1537+ png_write_fdAT(png_ptr, data, size);1538+ }1539+#endif /* PNG_WRITE_APNG_SUPPORTED */1540png_ptr->mode |= PNG_HAVE_IDAT;15411542png_ptr->zstream.next_out = data;1543@@ -1067,7 +1081,17 @@1544#endif15451546if (size > 0)1547+#ifdef PNG_WRITE_APNG_SUPPORTED1548+ {1549+ if (png_ptr->num_frames_written == 0)1550+#endif1551png_write_complete_chunk(png_ptr, png_IDAT, data, size);1552+#ifdef PNG_WRITE_APNG_SUPPORTED1553+ else1554+ png_write_fdAT(png_ptr, data, size);1555+ }1556+#endif /* PNG_WRITE_APNG_SUPPORTED */1557+1558png_ptr->zstream.avail_out = 0;1559png_ptr->zstream.next_out = NULL;1560png_ptr->mode |= PNG_HAVE_IDAT | PNG_AFTER_IDAT;1561@@ -1969,6 +1993,82 @@1562}1563#endif15641565+#ifdef PNG_WRITE_APNG_SUPPORTED1566+void /* PRIVATE */1567+png_write_acTL(png_structp png_ptr,1568+ png_uint_32 num_frames, png_uint_32 num_plays)1569+{1570+ png_byte buf[8];1571+1572+ png_debug(1, "in png_write_acTL");1573+1574+ png_ptr->num_frames_to_write = num_frames;1575+1576+ if (png_ptr->apng_flags & PNG_FIRST_FRAME_HIDDEN)1577+ num_frames--;1578+1579+ png_save_uint_32(buf, num_frames);1580+ png_save_uint_32(buf + 4, num_plays);1581+1582+ png_write_complete_chunk(png_ptr, png_acTL, buf, (png_size_t)8);1583+}1584+1585+void /* PRIVATE */1586+png_write_fcTL(png_structp png_ptr, png_uint_32 width, png_uint_32 height,1587+ png_uint_32 x_offset, png_uint_32 y_offset,1588+ png_uint_16 delay_num, png_uint_16 delay_den, png_byte dispose_op,1589+ png_byte blend_op)1590+{1591+ png_byte buf[26];1592+1593+ png_debug(1, "in png_write_fcTL");1594+1595+ if (png_ptr->num_frames_written == 0 && (x_offset != 0 || y_offset != 0))1596+ png_error(png_ptr, "x and/or y offset for the first frame aren't 0");1597+ if (png_ptr->num_frames_written == 0 &&1598+ (width != png_ptr->first_frame_width ||1599+ height != png_ptr->first_frame_height))1600+ png_error(png_ptr, "width and/or height in the first frame's fcTL "1601+ "don't match the ones in IHDR");1602+1603+ /* more error checking */1604+ png_ensure_fcTL_is_valid(png_ptr, width, height, x_offset, y_offset,1605+ delay_num, delay_den, dispose_op, blend_op);1606+1607+ png_save_uint_32(buf, png_ptr->next_seq_num);1608+ png_save_uint_32(buf + 4, width);1609+ png_save_uint_32(buf + 8, height);1610+ png_save_uint_32(buf + 12, x_offset);1611+ png_save_uint_32(buf + 16, y_offset);1612+ png_save_uint_16(buf + 20, delay_num);1613+ png_save_uint_16(buf + 22, delay_den);1614+ buf[24] = dispose_op;1615+ buf[25] = blend_op;1616+1617+ png_write_complete_chunk(png_ptr, png_fcTL, buf, (png_size_t)26);1618+1619+ png_ptr->next_seq_num++;1620+}1621+1622+void /* PRIVATE */1623+png_write_fdAT(png_structp png_ptr,1624+ png_const_bytep data, png_size_t length)1625+{1626+ png_byte buf[4];1627+1628+ png_write_chunk_header(png_ptr, png_fdAT, (png_uint_32)(4 + length));1629+1630+ png_save_uint_32(buf, png_ptr->next_seq_num);1631+ png_write_chunk_data(png_ptr, buf, 4);1632+1633+ png_write_chunk_data(png_ptr, data, length);1634+1635+ png_write_chunk_end(png_ptr);1636+1637+ png_ptr->next_seq_num++;1638+}1639+#endif /* PNG_WRITE_APNG_SUPPORTED */1640+1641/* Initializes the row writing capability of libpng */1642void /* PRIVATE */1643png_write_start_row(png_structrp png_ptr)1644@@ -2822,4 +2922,39 @@1645}1646#endif /* WRITE_FLUSH */1647}1648+1649+#ifdef PNG_WRITE_APNG_SUPPORTED1650+void /* PRIVATE */1651+png_write_reset(png_structp png_ptr)1652+{1653+ png_ptr->row_number = 0;1654+ png_ptr->pass = 0;1655+ png_ptr->mode &= ~PNG_HAVE_IDAT;1656+}1657+1658+void /* PRIVATE */1659+png_write_reinit(png_structp png_ptr, png_infop info_ptr,1660+ png_uint_32 width, png_uint_32 height)1661+{1662+ if (png_ptr->num_frames_written == 0 &&1663+ (width != png_ptr->first_frame_width ||1664+ height != png_ptr->first_frame_height))1665+ png_error(png_ptr, "width and/or height in the first frame's fcTL "1666+ "don't match the ones in IHDR");1667+ if (width > png_ptr->first_frame_width ||1668+ height > png_ptr->first_frame_height)1669+ png_error(png_ptr, "width and/or height for a frame greater than"1670+ "the ones in IHDR");1671+1672+ png_set_IHDR(png_ptr, info_ptr, width, height,1673+ info_ptr->bit_depth, info_ptr->color_type,1674+ info_ptr->interlace_type, info_ptr->compression_type,1675+ info_ptr->filter_type);1676+1677+ png_ptr->width = width;1678+ png_ptr->height = height;1679+ png_ptr->rowbytes = PNG_ROWBYTES(png_ptr->pixel_depth, width);1680+ png_ptr->usr_width = png_ptr->width;1681+}1682+#endif /* PNG_WRITE_APNG_SUPPORTED */1683#endif /* WRITE */1684diff -Naru libpng-1.6.50.org/scripts/symbols.def libpng-1.6.50/scripts/symbols.def1685--- libpng-1.6.50.org/scripts/symbols.def 2025-01-26 08:07:01.594606745 +09001686+++ libpng-1.6.50/scripts/symbols.def 2025-07-06 11:06:06.728585876 +09001687@@ -263,3 +263,23 @@1688png_get_mDCV_fixed @2571689png_set_mDCV @2581690png_set_mDCV_fixed @2591691+ png_get_acTL @2601692+ png_set_acTL @2611693+ png_get_num_frames @2621694+ png_get_num_plays @2631695+ png_get_next_frame_fcTL @2641696+ png_set_next_frame_fcTL @2651697+ png_get_next_frame_width @2661698+ png_get_next_frame_height @2671699+ png_get_next_frame_x_offset @2681700+ png_get_next_frame_y_offset @2691701+ png_get_next_frame_delay_num @2701702+ png_get_next_frame_delay_den @2711703+ png_get_next_frame_dispose_op @2721704+ png_get_next_frame_blend_op @2731705+ png_get_first_frame_is_hidden @2741706+ png_set_first_frame_is_hidden @2751707+ png_read_frame_head @2761708+ png_set_progressive_frame_fn @2771709+ png_write_frame_head @2781710+ png_write_frame_tail @279171117121713